READ Free Dumps For Microsoft- 70-410
Question ID 8945 | Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All servers run Windows Server 2012 R2. The domain contains two domain controllers named DC1 and DC2. Both domain controllers are virtual machines on a Hyper-V host. You plan to create a cloned domain controller named DC3 from an image of DC1. You need to ensure that you can clone DC1. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) |
Option A | Add the computer account of DC1 to the Cloneable Domain Controllers group. |
Option B | Create a DCCloneConfig.xml file on DC1. |
Option C | Add the computer account of DC3 to the Cloneable Domain Controllers group. |
Option D | Run the Enable-AdOptionalFeaturecmdlet |
Option E | Modify the contents of the DefaultDCCIoneAllowList.xml file on DC1 |
Correct Answer | AB |
Question ID 8946 | Your network contains an Active Directory domain named contoso.com. You create a software restriction policy to allow an application named App1 by using a certificate rule. You need to ensure that when users attempt to execute App1, the certificate for App1 is verified against a certificate revocation list (CRL). What should you do? |
Option A | Modify the rule for App1. |
Option B | Modify the Trusted Publishers Properties. |
Option C | Create a new certificate rule for App1. |
Option D | Modify the Enforcement Properties. |
Correct Answer | B |